$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa File: 63c48833-2603-30da-8097-8c1712221517.roa (raw, json) Hash identifier: PVhltKpMkWIiEq0mF/WV9QsaHajeRHSv3COpkTXQbN0= Subject key identifier: 22:A7:43:26:CE:E3:28:4F:68:E1:04:9B:68:39:5C:3A:47:4F:A4:45 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285849D42FA0E0F4D5C6AD01B8B980 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 30128 IP address blocks: 192.228.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a0:e0:f4:d5:c6:ad:01:b8:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=fdb8970c-7051-40f7-be37-ae6cc4628bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:37:22:0b:9d:c7:6c:c8:e4:bf:25:3c:2c: 1b:bc:66:19:23:03:ec:8a:c6:dc:60:41:49:f8:86: ce:5a:0a:39:6a:e4:f6:c5:f3:bf:7c:b9:02:7c:08: 37:38:76:35:05:5f:a9:04:80:f6:ec:56:36:48:42: 29:b5:ec:93:83:1e:51:05:37:a8:7a:0a:a7:e1:e8: ec:b0:76:eb:56:12:53:b6:2a:ae:8e:19:b7:2f:14: 5f:fc:c9:21:86:57:be:db:72:7a:e8:71:7d:3d:1a: ae:af:79:e9:cc:b2:a0:c0:c6:a0:2e:a6:5d:5b:00: 45:c8:5a:10:24:f4:96:a4:d9:2a:b5:8e:fe:62:54: d2:11:01:1d:6c:a2:35:11:ad:06:14:9e:58:01:43: 53:ac:2c:ba:95:96:31:1f:43:28:61:55:7b:be:9a: 77:cc:d6:80:11:45:a6:37:75:29:01:0f:7c:69:1c: f8:cc:58:b2:28:d8:72:4d:e2:c0:21:4d:3b:a4:8d: 02:35:4f:6c:33:be:25:2b:e5:1d:bc:08:8c:9e:69: 3f:e6:52:9d:06:b6:65:b7:b8:94:01:da:aa:ec:1a: 6b:54:64:3c:07:af:9d:21:c7:aa:06:94:6d:de:6f: e2:b1:01:be:f4:36:28:3f:e6:4a:bb:51:ca:71:3a: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A7:43:26:CE:E3:28:4F:68:E1:04:9B:68:39:5C:3A:47:4F:A4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 192.228.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:14:d5:2c:8c:d3:ac:70:7f:99:a6:d9:39:13:64:2b:a1:b5: 5b:c3:6b:53:46:03:8a:1c:9c:e3:b7:aa:e5:3f:34:22:4a:18: 28:a5:13:3b:45:9f:b8:84:13:2b:68:af:f8:08:0a:2f:6f:d5: 6e:7f:c0:2a:64:bb:a9:fd:b7:ba:72:12:71:38:83:52:fd:8b: ed:73:70:0e:71:d8:07:bf:88:c7:a0:de:e0:00:18:42:96:8e: de:a9:93:99:05:3f:c5:00:07:d0:77:48:bb:00:47:05:56:cd: a1:48:24:fd:47:b4:8a:fa:a5:7c:43:46:62:ee:39:1d:7e:47: 04:37:d1:46:a8:eb:4a:c1:df:ea:9a:b3:a7:ce:69:39:b2:31: 1b:91:34:7c:7a:8b:74:89:2d:6c:73:19:6a:52:15:21:f6:ec: 6a:81:96:4e:3f:69:c5:f0:8f:a0:2a:f2:7b:16:df:2d:2a:20: 3f:b2:5f:6c:7c:28:82:b6:b7:13:87:3a:e5:f3:0d:bb:8c:f4: b6:e3:f6:24:f4:65:94:b9:64:c9:c6:78:5c:91:32:30:f4:5c: 2e:ea:31:e4:36:0b:c9:c1:c2:dd:13:eb:28:8d:d3:2c:24:c0: 90:1b:12:10:7f:c1:b2:1e:fa:24:da:59:16:48:15:86:e4:3d: 98:c9:42:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6Dg9NXGrQG4uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmRiODk3MGMtNzA1MS00MGY3LWJlMzctYWU2Y2M0NjI4YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyM3Igudx2zI5L8lPCwbvGYZIwPsisbcYEFJ +IbOWgo5auT2xfO/fLkCfAg3OHY1BV+pBID27FY2SEIpteyTgx5RBTeoegqn4ejs sHbrVhJTtiqujhm3LxRf/Mkhhle+23J66HF9PRqur3npzLKgwMagLqZdWwBFyFoQ JPSWpNkqtY7+YlTSEQEdbKI1Ea0GFJ5YAUNTrCy6lZYxH0MoYVV7vpp3zNaAEUWm N3UpAQ98aRz4zFiyKNhyTeLAIU07pI0CNU9sM74lK+UdvAiMnmk/5lKdBrZlt7iU Adqq7BprVGQ8B6+dIceqBpRt3m/isQG+9DYoP+ZKu1HKcTr+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKnQybO4yhPaOEEm2g5XDpHT6RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNjNjNDg4MzMtMjYwMy0z MGRhLTgwOTctOGMxNzEyMjIxNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0U1SyM06xwf5mm2TkTZCuhtVvDa1NGA4ocnOO3quU/NCJKGCilEztF n7iEEytor/gICi9v1W5/wCpku6n9t7pyEnE4g1L9i+1zcA5x2Ae/iMeg3uAAGEKW jt6pk5kFP8UAB9B3SLsARwVWzaFIJP1HtIr6pXxDRmLuOR1+RwQ30Uao60rB3+qa s6fOaTmyMRuRNHx6i3SJLWxzGWpSFSH27GqBlk4/acXwj6Aq8nsW3y0qID+yX2x8 KIK2txOHOuXzDbuM9Lbj9iT0ZZS5ZMnGeFyRMjD0XC7qMeQ2C8nBwt0T6yiN0ywk wJAbEhB/wbIe+iTaWRZIFYbkPZjJQmA= -----END CERTIFICATE-----Generated at Tue May 13 11:18:00 2025 by rpki-client